Page 73 - ASPRI 2122 v2

DIRECTORY OF SINGAPORE PROCESS & CHEMICALS INDUSTRIES 2021/2022
INDUSTRIAL CYBERSECURITY FOR THE PROCESS INDUSTRY
In collaboration with TÜV SÜD PSB Pte Ltd, ASPRI organised a webinar titled, “Industrial Cybersecurity for the Process Industry” on 13 October 2020 to provide members with a better understanding of the cybersecurity framework used by the Process Industry.
Mr Steven Nah, Co-Lead of ASPRI’s Digitalisation, Innovation and Technology Adoption (DITA) Work Group and Treasurer of ASPRI’s 13th Executive Council, opened the webinar by highlighting the importance of cybersecurity and how the Process Industry can adopt new practices to ensure plant safety and security.
Following the opening remarks, Ms Zhang Yiran, Cybersecurity Services Consultant of TÜV SÜD delivered her presentation on industrial cybersecurity.
According to Ms Zhang two factors need to be present for a cyber threat to occur – a threat source and a threat vector. A threat source could be malware, equipment, or an unauthorised external person (a hacker) while a threat vector is a path or a means by which a cybercriminal gains access through one or more of six main routes into a computer system by exploiting a route vulnerability.
Ms Zhang also touched on the consequences of a cyber-attack which includes, but are not limited to:
• Endangerment of public or employee safety
• Damage to the environment
• Damage to the equipment under control
• Loss of product integrity
• Loss of public confidence or company
reputation
• Violation of legal or regulatory requirements
• Loss of proprietary or confidential
information
• Financial loss
• Impact on entity, local, state, or national
security
As more new technology becomes available, the Process Industry has been able to use drones and Internet of Things (IoT) sensors to improve autonomy and maintenance, respectively. But their increased usage has heightened the risks of cybersecurity.
After the presentation, ASPRI members engaged Ms Zhang in a Q&A session.
or health
67